Repository navigation
deps(docker): bump golang from 1.26.8-alpine to 1.27.1-alpine in the docker-minor-and-patch group - #160
deps(docker): bump golang from 1.26.8-alpine to 1.27.1-alpine in the docker-minor-and-patch group#160dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the docker-minor-and-patch group with 1 update: golang. Updates `golang` from 1.26.8-alpine to 1.27.1-alpine --- updated-dependencies: - dependency-name: golang dependency-version: 1.27.1-alpine dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Closing without merging. This moves only the two Dockerfiles to Go 1.27.1, while There is no security reason to move now: 1.26.8 is the current 1.26 patch, released the same day as 1.27.1, and Go 1.26 stays supported until Go 1.28. Moving to Go 1.27 will be one deliberate change across |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
The golang image in both Dockerfiles follows the toolchain go.mod pins, which CI, the unit tests, govulncheck and the GoReleaser archives use. ideaconnect#160 moved only the Docker builds to Go 1.27.1, which would have shipped a toolchain that only the functional suite exercises. A Go minor is a deliberate move across go.mod, both Dockerfiles and golangci-lint, so Dependabot now proposes golang patch updates only. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Bumps the docker-minor-and-patch group with 1 update: golang.
Updates
golangfrom 1.26.8-alpine to 1.27.1-alpineDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions